Vulnerability & Exploit Database

NTP Mode 6 UNSETTRAP DRDoS Scanner

This module identifies NTP servers which permit mode 6 UNSETTRAP requests that
can be used to conduct DRDoS attacks. In some configurations, NTP servers will
respond to UNSETTRAP requests with multiple packets, allowing remote attackers
to cause a distributed, reflected denial of service (aka, "DRDoS" or traffic
amplification) via spoofed requests.